It is not clear from that video what actually happened.
- The physical Titanium Card has no numbers on the card but if you lose it, then someone else can certainly use it. You will receive the notification of the transaction on your iPhone and also have the option to block the card if you do lose it. It is a Mastercard like any other with the added security measure of not having the numbers visible where a clerk could write down the numbers or take a picture of the card and manually enter the numbers on a website or for a payment.
- The Virtual Apple Card, does have card numbers when viewed in the Wallet app. If you give those numbers to someone else, either through a nefarious website or phishing message, they can certainly make charges to it. No one can view the actual card numbers on your device without knowing the Passcode used to open it.
- When using Apple Pay, none of those card numbers are exposed to a website or retailer when using Tap to Pay. That is the most secure option instead of using the actual card number.
- If your Apple Account is compromised, they would need to add it to another device, and that would not be possible when using Two Factor Authentication as required for Apple Card use. The only way the Apple Account could be added to another device is by them entering the Verification Code sent to your device.
If you have any specific questions, I may be able to help further.
